General
- Target 2026-07-12_7bfaa8eb05a59c5b3368873e445eb6b4_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- Sample260712-k5h6saft5n
- SHA256 4297734b22e0547271f30a797d4a35549654a8a7f5c90191fece3eb23529ae04
- MD5 7bfaa8eb05a59c5b3368873e445eb6b4
- SHA1 3fd04f767a7fd8e6cf178a995b941dcae808954a
- SHA512 efa116e1ddcb2cfc85e6bbb30f5804f07f958b193bc27741d8565db4b2f26ef376ef9a809850a3e31d2e7a43029ce58161b16dfe273a3860f3bdfa3211cfb3f4
- SSDEEP 98304:S314zWLV+zxuTuDzNY4KCL/gMzF2CqFMcWdu:SFRWNzq+c/
- TLSH T13FF58C0ABDA109E9C0AA933198B752667B74BC491F3227E73E90B7782F723C05D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_7bfaa8eb05a59c5b3368873e445eb6b4_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_7bfaa8eb05a59c5b3368873e445eb6b4_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_7bfaa8eb05a59c5b3368873e445eb6b4_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- SHA256 4297734b22e0547271f30a797d4a35549654a8a7f5c90191fece3eb23529ae04
- MD5 7bfaa8eb05a59c5b3368873e445eb6b4
- SHA1 3fd04f767a7fd8e6cf178a995b941dcae808954a
- SHA512 efa116e1ddcb2cfc85e6bbb30f5804f07f958b193bc27741d8565db4b2f26ef376ef9a809850a3e31d2e7a43029ce58161b16dfe273a3860f3bdfa3211cfb3f4
- SSDEEP 98304:S314zWLV+zxuTuDzNY4KCL/gMzF2CqFMcWdu:SFRWNzq+c/
- TLSH T13FF58C0ABDA109E9C0AA933198B752667B74BC491F3227E73E90B7782F723C05D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Suspicious use of NtSetInformationThreadHideFromDebugger